在php登录后重定向页面

Question

我是一名PHP新手，我使用了一个简单的登录表单，其中包含源代码。代码正在工作，但它不会将我重定向到主页，而是保持在登录页面中。下面是验证码，负责重定向，如果用户输入正确的凭据：

ob_start(); 
session_start(); 
$error=''; 
if(isset($_POST['submit'])){ 
if(empty($_POST['username']) || empty($_POST['password'])){ 
    $error="Username or Password is invalid"; 
} 
else{ 
    $username=$_POST['username']; 
    $password=$_POST['password']; 

    $cxn=mysql_connect("localhost","root","admin"); 
    $username=stripslashes($username); 
    $password=stripslashes($password); 
    $username=mysql_real_escape_string($username); 
    $password=mysql_real_escape_string($password); 

    $db=mysql_select_db("hrdb",$cxn); 
    $query=mysql_query("select * from login where Username='$username' AND 
    Password='$password'",$cxn); 

    $rows=mysql_num_rows($query); 
    if($rows==1){ 
     $_SESSION['log_user']=$username; 
     echo "test"; 
     header('Location: http://localhost/HRMS/profile.php'); 
     exit; 
    }else{ 
     $error="Username or password is invalid"; 
    } 
    mysql_close($cxn); 
    } 
    } 
    ob_end_flush(); 

Answer 1

您可以使用header（）函数来发送新的HTTP头，但是这必须在任何发送到浏览器HTML或文本（例如在声明之前）。

您可能希望header电话后，包括die：

header("Location: http://localhost/HRMS/profile.php"); 
die(); 

Answer 2

我会建议你使用的mysqli替代MySQL和 也有细微的变化，请仔细检查它 和测试工作的代码现在好了。

ob_start(); 
    session_start(); 
    $error=''; 


    if(isset($_POST['submit'])){ 
     if(empty($_POST['username']) || empty($_POST['password'])){ 
      $error="Username or Password is invalid"; 
     } 
     else{ 
      $username=$_POST['username']; 
      $password= md5($_POST['password']); 

      $cxn= mysqli_connect("localhost","root","","hrdb"); 
      $username=stripslashes($username); 
      $password=stripslashes($password); 
      $username=mysqli_real_escape_string($cxn,$username);; 
      $password=mysqli_real_escape_string($cxn,$password);; 

      $query=mysqli_query($cxn,"select * from user_mst_tbl where USER_NAME='".$username."' AND 
      PASS_WORD='".$password."'"); 

      $rows=mysqli_num_rows($query); 
      if($rows==1){ 
       $_SESSION['log_user']=$username; 
       echo "test"; 
       header('Location: http://localhost/HRMS/profile.php'); 

      }else{ 
       $error="Username or password is invalid"; 
      } 
      mysql_close($cxn); 
     } 
    } 
    ob_end_flush(); 

Answer 3

您收到的错误：

Deprecated: mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead

因为你已经安装了XAMPP更高版本。

您需要考虑使用prepared statement而不是deprecatedmysql_* API。在您的查询中使用它之前，您不需要清理每个变量，因为准备好的语句将为您执行。

如果您打算使用PHP的功能header()，请确保在调用header()之前没有任何输出。

还请检查您的profile.php，如果它也有header()调用，它会将页面重定向回登录页面。

<?php 

/* MAKE SURE THAT THERE ARE NO HTML/OUTPUTS ABOVE THIS CODE */ 

ob_start(); 
session_start(); 
$error = ""; 

/* ESTABLISH CONNECTION */ 
$con = new mysqli("localhost", "root", "admin", "hrdb"); 

/* CHECK CONNECTION */ 
if (mysqli_connect_errno()) { 
    printf("Connect failed: %s\n", mysqli_connect_error()); 
    exit(); 
} 

if(isset($_POST['submit'])){ 

    if(empty($_POST['username']) || empty($_POST['password'])){ 
    $error="Username or Password is invalid"; 
    } 
    else{ 

    if($stmt = $con->prepare("SELECT Username FROM login WHERE Username = ? AND Password = ?")){ /* CHECK AND PREPARE THE QUERY */ 
     $stmt->bind_param("ss",$_POST["username"],$_POST["password"]); /* BIND THESE VARIABLES TO YOUR PREPARED QUERY; s STANDS FOR STRINGS */ 
     $stmt->execute(); /* EXECUTE THE QUERY */ 
     $rows = $stmt->num_rows; /* GET NUMBER OF ROWS/RESULTS */ 
     if($rows == 1){ /* IF FOUND RESULT */ 
     $stmt->bind_result($username); /* STORE THE RESULT TO THIS VARIABLE */ 
     $stmt->fetch(); /* FETCH THE RESULT */ 
     $_SESSION['log_user'] = $username; /* STORE THE RESULT TO THIS SESSION VARIABLE */ 
     /* header('LOCATION: http://localhost/HRMS/profile.php'); REDIRECT THE PAGE TO profile.php */ 
     ?> 
      <meta http-equiv="refresh" content=".5; URL='profile.php'"/> <!-- REDIRECT TO profile.php IN HALF A SECOND --> 
     <?php 
     } 
     else { 
     $error="Username or password is invalid"; 
     } 
     $stmt->close(); 
    } /* END OF PREPARED STATEMENT */ 

    } /* END OF ELSE */ 

} /* END OF ISSET SUBMIT */ 

ob_end_flush(); 

?> 

您还应该保护存储在数据库中的密码。您可以使用password_hash()。